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This is in response to the appeal brief filed May 1 , 2006 appealing from the Office action 
mailed September 22, 2005. 
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(1) Real Party in Interest 

A statement identifying by name the real party in interest is contained in the brief. 

(2) Related Appeals and Interferences 

The examiner is not aware of any related appeals, Interferences, or judicial 
proceedings which will directly affect or be directly affected by or have a bearing on the 
Board's decision in the pending appeal. 

(3) Status of Claims 

The statement of the status of claims contained in the brief is correct. 

(4) Status of Amendments After Final 

The appellant's statement of the status of amendments after final rejection 
contained in the brief is correct. 

(5) Summary of Claimed Subject Matter 

The summary of claimed subject matter contained in the brief is correct. 

(6) Grounds of Rejection to be Reviewed on Appeal 

The appellant's statement of the grounds of rejection to be reviewed on appeal is 
correct. 

(7) Claims Appendix 

The copy of the appealed claims contained in the Appendix to the brief is correct. 

(8) Evidence Relied Upon 

6.047.377 Gong 4-2000 

(9) Grounds of Rejection 

The following ground(s) of rejection are applicable to the appealed claims: 
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5. Claims 1-30 are rejected under 35 U.S.C. 102(b) as being anticipated by Gong 
(U.S. Patent 6,047,377). 

Regarding claim 1, Gong discloses: 

A method of controlling access to computer system resources based on 
permissions, comprising: 

"receiving a request for access to a computer system resource" (Figure 7 
item 750, column 6 lines 36-46, column 18 line 29 - column 19 line 36); 

"determining if a superclass permission of a required permission is present 
in eacli protection domain of an access control context, wherein the superclass 
permission is a super class of the required permission" (column 6 lines 36-46, 
column 18 lines 29-45); 

"adding the required permission to a permission collection if the 
superclass permission of the required permission is present in each protection 
domain of the access control context (column 17 lines 1-5, column 19 lines 37-43); 
and 

"granting access to the resource if the superclass permission of the 
required permission is present in each protection domain of the access control 
context (column 10 lines 59-67, column 19 lines 4-36). 

Regarding claims 3,13, and 23 Gong discloses: 
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"determining the required permission based on a CodeSource associated 
with the request (column 14 lines 28-36, column 15 lines 65-67); and 

"determining the superclass permission of the required permission based 
on the required permission" (column 6 lines 36-46, column 18 lines 29-45). 

Regarding claims 5,15, and 25, Gong discloses: 

wherein adding the required permission to a permission collection includes 
"creating a new permission coilection and adding the required permission to the 
new permission coliection" (column 16 line 56 - column 17 line 13). 

Regarding claims 6,16, and 26, Gong discloses: 

wherein adding the required permission to a permission collection further 
includes "adding any subciass permissions of the required permission to the new 
permission collection" (column 16 line 56 - column 17 line 13). 

Regarding 8, 18 and 28, Gong discloses: 

wherein adding the required permission to a permission collection includes 
"adding the permission to a permission collection associated with the superclass 
permission" (column 16 line 56 - column 17 line 13). 
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(10) Response to Argument 

A. The Reference does not anticipate claims 1-2, 4, 7, 9-12, 14, 19-22, 24, 27, 
and 29-30. 



The Appellant has argued: 

Gong does not teach the step of "determining if a superciass permission of a 
required permission is present in each protection domain of an access control context, 
wherein the superclass permission is a superclass of the required permission." 

The Examiner contends that a "superclass" as defined in the Applicant's 
application, is a base permission which is defined along with inherited, or subclass 
permissions that fall below the base permission in a hierarchy of permissions. Gong 
discloses a hierarchy of permissions as well, with the permission superclass being the 
highest permission on the hierarchy tree (column 6 lines 27-35). Furthermore, the 
permissions which encompass the permissions below them, can be interpreted as 
"super classes" of the permissions they encompass. Based on this definition of super 
class. Gong discloses, "if every associated protection domain contains a permission 
object that represents a permission encompassing the required permission, then the 
requested action is authorized" (column 19 lines 26-30). The "permission 
encompassing the required permission" is interpreted as being the superclass, as it is a 
higher permission as it "encompasses" the required permission. Furthermore, If this 



Application/Control Number: 10/002.439 Page 6 

Art Unit: 2131 

superclass permission of the required permission is contained in "every associated 
protection domain" is analogous to the superclass permission of a required permission 
being present in each protection domain of the claim 1. Furthennore, the access control 
context is analogous to authorizing an action, as it is granting access to perform a 
certain action. Therefore, it is asserted that Gong meets every aspect and limitation of 
the above claim limitation. 

B. The Reference does not teach all the features of Claims 3,13, and 23. 

The Appellant further argues: 

Gong does not teach, "determining tlie superclass permission oftlie required 
permission based on the required permission" 

The Examiner contends that Gong teaches determining which encompassing 
permission (superclass permission) contains the required permission for the action 
(column 18 lines 37-45). If the encompassing permission (superclass permission) of the 
required permission is present in every protection domain, then access is authorized for 
the action (column 18 lines 37-45). Therefore, the Examiner respectfully asserts that 
Gong does teach determining the superclass permission of the required permission 
based on the required permission. 

C. The Reference does not teach all the features of Claims 5,15, and 25. 
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The Appellant further argues: 

Gong does not teach, "creating a new permission collection and adding the 
required permission to the new permission collection," 

The Examiner contends that Gong teaches creating a new permission collection 
and adding the required permission to the new permission collection. Gong teaches, 
"when a new category of permissions is desired, a new subclass is created" (column 19 
lines 36-38). This new subclass is analogous to the new permission collection because 
it contains different permissions. Furthermore, Gong teaches that "the particular rules 
or policy that govern whether the permissions granted a principal are encompassed by 
permission in the new category are implemented in the validation method of the new 
subclass representing permissions in the new subclass" (column 19 lines 39-43). The 
validation method is responsible for checking if the required permission that has been 
added to the new subclass, is encompassed by a permission in the new category. 
Furthermore, if a new subclass is being created, based on Gong's inheritance principals 
(column 6 lines 31-35), the permissions would be passed down from the superclass 
down to the subclasses, so the required pemiissions would be added to the subclasses 
(permission collections). 

D. The Reference does not teach all the features of Claims 6,16, and 26. 
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The Appellant further argues: 

Gong does not teach "adding any subclass permissions of the required 
permission to the new permission collection." 

Gong teaches, "when a new category of permissions is desired, a new subclass 
is created" (column 19 lines 36-38). This new subclass is analogous to the new 
permission collection because it contains different permissions. Furthermore, Gong 
teaches that "the particular rules or policy that govern whether the permissions granted 
a principal are encompassed by permission in the new category are implemented in the 
validation method of the new subclass representing permissions in the new subclass" 
(column 19 lines 39-43). The validation method is responsible for checking if the 
required permission that has been added to the new subclass, is encompassed by a 
permission in the new category. Furthermore, if a new subclass is being created, based 
on Gong's inheritance principals (column 6 lines 31-35), the permissions would be 
passed down from the superclass down to the subclasses, so the required permissions 
and any subclass permissions which encompass the new subclass would be added to 
the new subclass (permission collection). 

E. The Reference does not teach all the features of Claims 8, 18, and 28. 



Finally, the Appellant argues: 
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Gong does not teach "adding the penvission to a penvission collection 
associated with the superclass permission. " 

Gong teaches, "when a new category of permissions Is desired, a new subclass 
is created" (column 19 lines 36-38). This new subclass is analogous to the new 
permission collection because it contains different permissions. Furthermore, Gong 
teaches that "the particular rules or policy that govern whether the pennissions granted 
a principal are encompassed by permission in the new category are implemented in the 
validation method of the new subclass representing permissions in the new subclass" 
(column 19 lines 39-43). The validation method is responsible for checking if the 
required permission that has been added to the new subclass, is encompassed by a 
permission in the new category. Furthermore, if a new subclass is being created, based 
on Gong's inheritance principals (column 6 lines 31-35), the permissions would be 
passed down from the superclass down to the subclasses, so the required permissions 
and any subclass permissions which encompass the new subclass (superclass) would 
be added to the new subclass (permission collection). 

(11) Related Proceeding(s) Appendix 

No decision rendered by a court or the Board is identified by the examiner in the 
Related Appeals and Interferences section of this examiner's answer. 

For the above reasons, it is believed that the rejections should be sustained. 
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